PoliticalRepoPoliticalRepo

Estonia · Law · SE

597

Cyber ​​Security Act

avaldatud riigiteatajasEstonia· Riigikogu· ET

Introduced

5 March 2018

Last action

—

Status

AVALDATUD_RIIGITEATAJAS

Sponsors

—

Subjects

Discovery layer

Source updated

9 May 2018

Official sourceDownload fileView documentsShare

Summary

The draft adopts the European network and information security directive. Domestically, requirements for the implementation of security measures and notification of cyber incidents are established for providers of essential services and digital services. It also specifies the tasks of the national supervisory authority, the State Information Systems Agency, in the coordination of ensuring cyber security and the organization of cross-border cooperation. The purpose of the bill is to strengthen services of decisive importance for society provision and the protection of network and information systems of state and local government units. Service providers that significantly affect the functioning of society (for example vital services, important infrastructure companies, Eesti Interneti SA) as well as major digital service providers (internet-based trading places, search engines or cloud data processors) must implement risk analysis-based organizational, physical and IT security measures. Also monitor activities that threaten security and, if necessary, implement measures to reduce the impact and spread of incidents. In addition, there is an obligation to inform the State Information System Board about cyber incidents with a significant impact. In the public sector (including local government units), the obligation to implement information security measures also extends to, for example, e-mail servers, file servers and document management systems. Until now, the obligation to implement has been in place security measures resulting from legislation only for information systems that are databases within the meaning of the Public Information Act. The bill does not foresee significant new obligations for the public sector. Ensuring the security of information systems has been part of the development and management of IT systems for a long time.

Machine translation from Estonian. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

29 official files

Lõpptekst bdoc

View fileDownload file

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.

Sources

PoliticalRepo is an index and interpretation layer, not the authoritative legal source.